CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22428
https://notcve.org/view.php?id=CVE-2024-22428
16 Jan 2024 — Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity. Dell iDRAC Service Module, versiones 5.2.0.0 y anteriores, contiene una vulnerabilidad de permisos predeterminados incorrectos. Puede permitir que un usuario local sin privilegios escale privilegios y ejecute código arbitrari... • https://www.dell.com/support/kbdoc/en-us/000221129/dsa-2024-018-security-update-for-dell-idrac-service-module-for-weak-folder-permission-vulnerabilities • CWE-276: Incorrect Default Permissions •
CVSS: 6.6EPSS: 0%CPEs: 9EXPL: 0CVE-2018-11053 – iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability
https://notcve.org/view.php?id=CVE-2018-11053
26 Jun 2018 — Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content. El módulo de servicio Dell EMC iDRAC para todas las versiones de Linux compa... • http://www.dell.com/support/article/us/en/19/sln310281/ism-dell-emc-idrac-service-module-improper-file-permission-vulnerability?lang=en • CWE-732: Incorrect Permission Assignment for Critical Resource •